devops-infra MCP Server
Find auth, billing, data, deploy, CI, and MCP launch risks in AI-built SaaS before users do. Local-first CLI and GitHub Action.
Discovered via github-topic:mcp and last synced 3mo ago.
1. Install the package
npx ai-saas-guard
2. Add to claude_desktop_config.json
{
"mcpServers": {
"ai-saas-guard": {
"command": "npx",
"args": [
"ai-saas-guard"
]
}
}
}Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) / %APPDATA%\Claude\claude_desktop_config.json (Windows)
Plaintext secrets, non-localhost binds, broad filesystem/write access, shell tools, raw SQL tools, side-effect classification, local policy and receipt template
RLS disabled on sensitive tables, broad `USING`/`WITH CHECK`, tenant membership patterns, weak write checks, storage object policy scope
Broad local launch preflight across secrets, Stripe, Supabase, MCP, API routes, and deploy config
Purpose
Launch decision queue, short summary, terminal, JSON, SARIF, and PR-focused markdown
Examples of risks it flags
Inventory MCP configs and classify side effects; use `--policy-template` for a local allow/deny policy and tool-call receipt format
Missing webhook route, unsigned webhook handling, parsed-body signature risk, missing idempotency, missing failure/cancel/update/refund paths
Inspect GitHub Actions hygiene that affects AI-built SaaS launch readiness
Status
Best for
Classify the current git diff or a base branch diff for review priority; supports JSON, SARIF, and PR-focused markdown
Inspect migrations and policy files for RLS and ownership risks; use `--doctor` for static RLS debugging steps and SQL cookbook output
Inspect webhook handlers and billing lifecycle coverage